On 16 September 2015 at 08:59, Henry Story <henry.story@co-operating.systems> wrote: > Cookies respect SOP by design
This is not correct. Cookies are part of the legacy cruft of the HTTP protocol. Just as application/x-form-data is (https://fetch.spec.whatwg.org/#dom-request step 8)